[PHP] 2nd Pair of eyes

2011-01-18 Thread Donovan Brooke
Hello, I warned the list that I may have questions! ;-) ...building a simple cookie-based log-in system, and have narrowed an error to this below: (sorry for email line breaks, if any) ---Start--- if ($_post['f_action']=='login') { // connect to database (custom function) $r =

Re: [PHP] 2nd Pair of eyes

2011-01-18 Thread Daniel Brown
On Tue, Jan 18, 2011 at 12:49, Donovan Brooke li...@euca.us wrote: Hello, I warned the list that I may have questions! ;-) ...building a simple cookie-based log-in system, and have narrowed an error to this below: (sorry for email line breaks, if any) ---Start--- if

Re: [PHP] 2nd Pair of eyes

2011-01-18 Thread Richard Quadling
On 18 January 2011 17:49, Donovan Brooke li...@euca.us wrote:    $query = SELECT u_id FROM cms_users WHERE u_name = $_post['f_user'] AND u_pass = $_post['f_pass']; Make sure you clean the inputs before using them. If the username entered was ... '' OR 1 -- you may have problems with

Re: [PHP] 2nd Pair of eyes

2011-01-18 Thread Simon J Welsh
On 19/01/2011, at 6:49 AM, Donovan Brooke wrote: Hello, I warned the list that I may have questions! ;-) ...building a simple cookie-based log-in system, and have narrowed an error to this below: (sorry for email line breaks, if any) ---Start--- $query = SELECT u_id FROM cms_users

Re: [PHP] 2nd Pair of eyes

2011-01-18 Thread Donovan Brooke
Simon J Welsh wrote: [snip] ---Start--- $query = SELECT u_id FROM cms_users WHERE u_name = $_post['f_user'] AND u_pass = $_post['f_pass']; Array indices either need to be accessed without quotes for the key, or by enclosing the variable in curly braces. --- Simon Welsh Admin of

Re: [PHP] 2nd Pair of eyes

2011-01-18 Thread Donovan Brooke
Daniel Brown wrote: On Tue, Jan 18, 2011 at 12:49, Donovan Brookeli...@euca.us wrote: Hello, I warned the list that I may have questions! ;-) ...building a simple cookie-based log-in system, and have narrowed an error to this below: (sorry for email line breaks, if any) ---Start--- if